Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/15CBC2FE5F1111EBB1A05A17C4F9AE02.roa
File: 15CBC2FE5F1111EBB1A05A17C4F9AE02.roa (raw, json)
Hash identifier: rs+FULRbOmISQD3R+AAdQcCYFvBuWb+JNngI3zcDwc0=
Subject key identifier: 8C:8C:F5:A1:0F:00:F6:28:AF:2B:A9:D6:CD:83:24:4E:A6:75:28:D2
Certificate issuer: /CN=A9189099/serialNumber=6200B157ADBA2569FA7B88B7DA2FB5AE3FF6A3B6
Certificate serial: 065B
Authority key identifier: 62:00:B1:57:AD:BA:25:69:FA:7B:88:B7:DA:2F:B5:AE:3F:F6:A3:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgCxV626JWn6e4i32i-1rj_2o7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/15CBC2FE5F1111EBB1A05A17C4F9AE02.roa
Signing time: Thu 26 Sep 2024 22:21:48 +0000
ROA not before: Thu 26 Sep 2024 22:21:48 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 206804
IP address blocks: 116.93.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 10:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1627 (0x65b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189099/serialNumber=6200B157ADBA2569FA7B88B7DA2FB5AE3FF6A3B6
Validity
Not Before: Sep 26 22:21:48 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66f5de7c-a192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b8:c5:9f:35:bd:56:0e:71:54:42:82:03:be:
5a:32:ef:82:03:42:2e:c6:9e:db:a9:24:d7:eb:76:
6c:b0:44:d0:1d:ae:6c:0c:8f:d7:3f:f7:41:5b:89:
32:9b:77:e7:75:50:43:0f:85:b8:34:51:f2:32:c3:
b7:fd:d7:8d:d4:8f:2d:52:f2:06:0a:23:f7:02:2a:
88:07:98:58:85:7a:f4:5b:dd:15:ee:80:ef:34:88:
ba:14:ad:c2:09:b2:d9:2e:b7:fe:f5:e0:37:db:3f:
57:f8:f7:72:fc:88:08:1e:22:bb:e8:7e:c2:ca:83:
3a:af:f9:13:04:5f:82:42:9d:eb:ee:41:57:80:5b:
f5:3a:80:40:bb:44:b6:45:10:59:d1:70:8a:53:b6:
a2:54:db:ab:91:be:a6:86:2d:ae:3b:e7:8f:3f:c7:
6b:53:97:a7:22:b8:3f:c7:b0:0a:ff:31:96:31:94:
f7:53:b2:9a:a7:0e:ee:28:4b:4e:ef:83:19:2e:8e:
3a:7c:b7:b0:6c:82:18:36:ee:b1:82:e2:cf:36:8a:
7c:6a:7a:8d:a4:18:f9:e5:d6:e3:7a:d9:a6:21:ff:
21:cb:f5:b7:2a:4f:90:e8:cd:2d:9a:e7:fe:4e:1e:
be:2d:cd:0f:26:a4:21:a8:de:0e:a9:ff:a8:54:0d:
91:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8C:F5:A1:0F:00:F6:28:AF:2B:A9:D6:CD:83:24:4E:A6:75:28:D2
X509v3 Authority Key Identifier:
keyid:62:00:B1:57:AD:BA:25:69:FA:7B:88:B7:DA:2F:B5:AE:3F:F6:A3:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/YgCxV626JWn6e4i32i-1rj_2o7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgCxV626JWn6e4i32i-1rj_2o7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189099/8AEFB1D25F0F11EB8D8B2616C4F9AE02/15CBC2FE5F1111EBB1A05A17C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.93.53.0/24
Signature Algorithm: sha256WithRSAEncryption
32:8b:0d:24:02:be:29:0a:b1:f0:d1:66:4d:0e:5e:93:55:a4:
67:44:e4:50:02:6d:76:64:d3:84:02:0e:27:a6:3c:b8:fb:48:
19:f1:b7:86:49:68:bf:2d:7e:a9:df:b0:5c:9d:bc:26:25:0d:
fc:dc:48:fe:e6:c1:23:be:0a:b1:13:0b:13:dd:a4:fb:2b:e3:
5d:e8:69:1a:99:38:4c:a4:87:2c:8a:7d:83:e3:14:b5:e7:c1:
41:d2:14:78:22:a6:71:90:90:45:02:c7:e2:42:48:33:72:b1:
0a:b4:71:4f:d8:5e:ef:e3:b9:92:36:1e:34:0a:00:1a:34:c6:
ff:34:47:f9:90:c7:0a:ee:bf:54:f5:79:27:2b:f3:aa:9e:65:
0f:0a:bb:79:7e:27:72:5b:36:83:a3:dc:88:b8:29:e7:59:85:
7c:d8:ad:c6:68:b0:66:21:04:3f:02:f5:9c:34:d8:43:67:aa:
e6:6a:c3:b0:4d:24:9b:da:d3:51:a9:34:31:c1:b3:cf:dc:79:
0d:4a:fb:5f:60:ac:86:aa:e2:92:2e:39:14:07:fb:da:9a:ca:
ef:cc:92:19:8f:13:09:46:aa:53:18:36:a2:a7:ac:56:37:7e:
e0:c3:fb:fe:05:7b:6b:dc:66:33:88:bb:44:3f:67:c7:37:aa:
97:07:90:0e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODkwOTkxMTAvBgNVBAUTKDYyMDBCMTU3QURCQTI1NjlGQTdCODhCN0RBMkZCNUFF
M0ZGNkEzQjYwHhcNMjQwOTI2MjIyMTQ4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmY1ZGU3Yy1hMTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzrjFnzW9Vg5xVEKCA75aMu+CA0Iuxp7bqSTX63ZssETQHa5sDI/XP/dBW4ky
m3fndVBDD4W4NFHyMsO3/deN1I8tUvIGCiP3AiqIB5hYhXr0W90V7oDvNIi6FK3C
CbLZLrf+9eA32z9X+Pdy/IgIHiK76H7CyoM6r/kTBF+CQp3r7kFXgFv1OoBAu0S2
RRBZ0XCKU7aiVNurkb6mhi2uO+ePP8drU5enIrg/x7AK/zGWMZT3U7Kapw7uKEtO
74MZLo46fLewbIIYNu6xguLPNop8anqNpBj55dbjetmmIf8hy/W3Kk+Q6M0tmuf+
Th6+Lc0PJqQhqN4Oqf+oVA2R6wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIyM9aEP
APYoryup1s2DJE6mdSjSMB8GA1UdIwQYMBaAFGIAsVetuiVp+nuIt9ovta4/9qO2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTA5OS84QUVGQjFEMjVG
MEYxMUVCOEQ4QjI2MTZDNEY5QUUwMi9ZZ0N4VjYyNkpXbjZlNGkzMmktMXJqXzJv
N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lnQ3hWNjI2SlduNmU0aTMyaS0xcmpfMm83WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODkwOTkvOEFFRkIxRDI1RjBGMTFFQjhEOEIyNjE2QzRGOUFFMDIvMTVDQkMyRkU1
RjExMTFFQkIxQTA1QTE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB0XTUwDQYJKoZIhvcNAQELBQADggEBADKLDSQCvikKsfDR
Zk0OXpNVpGdE5FACbXZk04QCDiemPLj7SBnxt4ZJaL8tfqnfsFydvCYlDfzcSP7m
wSO+CrETCxPdpPsr413oaRqZOEykhyyKfYPjFLXnwUHSFHgipnGQkEUCx+JCSDNy
sQq0cU/YXu/juZI2HjQKABo0xv80R/mQxwruv1T1eScr86qeZQ8Ku3l+J3JbNoOj
3Ii4KedZhXzYrcZosGYhBD8C9Zw02ENnquZqw7BNJJva01GpNDHBs8/ceQ1K+19g
rIaq4pIuORQH+9qayu/MkhmPEwlGqlMYNqKnrFY3fuDD+/4Fe2vcZjOIu0Q/Z8c3
qpcHkA4=
-----END CERTIFICATE-----
Generated at Tue Oct 15 12:42:16 2024 by rpki-client on console-fra.rpki-client.org